General
- Target 2026-07-15_5f293c0b092840aec927ba007d09cfd9_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260716-ca2qmsd18t
- SHA256 5bc2f14d512b89d6707226b749a2493feff611ed285abf9730ba9f6820de2d13
- MD5 5f293c0b092840aec927ba007d09cfd9
- SHA1 4dbfa0ff3d6f50845659a521f8de6f5bd1531982
- SHA512 d138ea06b29e176967c3e0c549a361ff4216b716356fe08ce1b132139cfcf7efcbd6df4a2e127258cc1632150739269535ed4db5e17e2ff1f430a50588b844fb
- SSDEEP 49152:xWJE2ZctEafitmGYj+uYP4D2VPrXdATGBrMGWr7nTC8HPS:GE2ZBaqaj+uYP4srmKtMbTC8HP
- TLSH T155952301B5D5C4B5FAB66A34A875C9A04FB8FC701A608ADF63443E291F785C0E539BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_5f293c0b092840aec927ba007d09cfd9_amadey_elex_hellokitty_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_5f293c0b092840aec927ba007d09cfd9_amadey_elex_hellokitty_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 5bc2f14d512b89d6707226b749a2493feff611ed285abf9730ba9f6820de2d13
- MD5 5f293c0b092840aec927ba007d09cfd9
- SHA1 4dbfa0ff3d6f50845659a521f8de6f5bd1531982
- SHA512 d138ea06b29e176967c3e0c549a361ff4216b716356fe08ce1b132139cfcf7efcbd6df4a2e127258cc1632150739269535ed4db5e17e2ff1f430a50588b844fb
- SSDEEP 49152:xWJE2ZctEafitmGYj+uYP4D2VPrXdATGBrMGWr7nTC8HPS:GE2ZBaqaj+uYP4srmKtMbTC8HP
- TLSH T155952301B5D5C4B5FAB66A34A875C9A04FB8FC701A608ADF63443E291F785C0E539BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1